31 vulnerability engineer jobs at 23 companies in Philadelphia, PA

1mo
Save
Mark Applied
Hide
X-Day Offensive Research (XOR) Vulnerability Researcher
Jersey City or Washington or Chicago or Plano or Houston or Tampa or Atlanta or Wilmington or McLean or Columbus
$152k-$260k/yr OnsiteFull Time
JPMorgan Chase
JPMorgan ChaseNYSE: JPM: Global financial services firm providing banking and investment solutions.
5+ YOE5+ years cybersecurity experience with vulnerability research, reverse engineering, exploit development, and assessments; strong OS internals and analysis skills; proven CVE track record; excellent communication.
IDA Pro, Ghidra, Binary Ninja, WinDbg, GDB, RR, LibFuzzer, LibAFL, AFL++, OSS-Fuzz, Syzkaller, LLVM, Angr, KLEE, Intel Pin, DynamoRIO, Frida, C/C++, Java, .NET, Open Worldwide Application Security Project (OWASP) Top Ten, National Institute of Standards and Technology (NIST) Cybersecurity Framework
3d
Save
Mark Applied
Hide
Cyber Software Engineer Staff
King of Prussia, Pennsylvania, United States
$136k-$252k/yr HybridFull Time
Lockheed Martin
Lockheed MartinNYSE: LMT: Designs and manufactures advanced aerospace, defense, and security systems.
9+ YOEBachelor's degree in a STEM discipline and 9+ years of cybersecurity or systems engineering experience. Requires Linux/Windows security, Ansible, NIST frameworks, vulnerability management, scripting, and eligibility for DoD Secret clearance.
Ansible, NIST SP 800-53, NIST 800-171, Linux, Windows, Kubernetes, OpenShift, ArcSight, SIEM, CI/CD
2mo
Save
Mark Applied
Hide
Information System Security Engineer
Philadelphia, Pennsylvania, United States
$85k-$100k/yr OnsiteFull Time
The GBS Group
The GBS Group: Provides technical engineering and maintenance services for infrastructure assets.
3+ YOEABET-accredited BS in CS/EE/CE or cybersecurity, 2–3+ years cybersecurity/IT experience, Security+ or CISSP, RMF and Linux experience, vulnerability analysis experience, ability to obtain security clearance (US citizenship required).
RMF, DISA Security Technical Implementation Guides (STIGs), Security Requirements Guides (SRGs), Assured Compliance Assessment Solution (ACAS), ACAS, AV, Standard Engineering Process (SEP), Windows, Linux, Red Hat Enterprise Linux (RHEL), VxWorks
2w
Save
Mark Applied
Hide
Senior Product Security Engineer (Black Duck & Application Security) - Onsite
Philadelphia, Pennsylvania, United States
$90k-$130k/yr OnsiteFull Time
Cognizant
CognizantNasdaq: CTSH: Provides IT consulting and digital business process services.
8+ YOE8+ years in product/application security with hands-on Black Duck/SCA experience, Black Duck API integrations, CI/CD automation, vulnerability analysis, and stakeholder communication.
Black Duck, Black Duck APIs, CI/CD, AWS, Azure, GCP
2w
Save
Mark Applied
Hide
Senior Cybersecurity Engineer
Philadelphia, Pennsylvania, United States
OnsiteFull Time
Comcast
ComcastNASDAQ: CMCSA: Provides global telecommunications, media content, and entertainment services.
8+ YOE8+ years in cybersecurity engineering/application/cloud security with Secure SDLC, vulnerability management, cloud and DevOps security, secure code review, and strong communication.
AWS, Terraform, Ansible, Docker, Kubernetes, Python, SQL, Linux, Windows, CI/CD, Infrastructure as Code, Foundational AI Models (FAIM)
1w
Save
Mark Applied
Hide
Sr. SecOps Security Engineer
Bensalem, Pennsylvania, United States
OnsiteFull Time
Police and Fire Federal Credit Union
Police and Fire Federal Credit Union: Member-owned financial cooperative offering banking and loan services.
5+ YOE5+ years security engineering experience; design and manage SIEM, IDS/IPS, DLP, vulnerability scanning; knowledge of financial regulations (NCUA, GLBA, PCI DSS); bachelor's degree in related field required.
SPLUNK, SIEM, ForcePoint, Nessus, DLP, FireEye, Trellix, Cisco Secure Workload (CSW), Cisco Identity Services Engine (ISE), Cisco AMP, Microsoft Defender, Okta, RSA, VMware, StealthWatch, NetFlow
1mo
Save
Mark Applied
Hide
Sr. Cyber Security Engineer
Conshohocken or Issy-les-Moulineaux or Rennes
OnsiteFull Time
InterDigital
InterDigitalNasdaq: IDCC: Researches and licenses wireless and video communication technologies.
Senior cybersecurity engineer with expertise across enterprise, cloud, AI, IAM, GRC, vulnerability management, and incident response; familiarity with security frameworks; bachelor’s or equivalent and relevant certifications preferred.
NIST, ISO 27001, CIS, SOC 2, AWS, Azure
2mo
Save
Mark Applied
Hide
Senior Cybersecurity Engineer
Princeton or Boulder
$121k-$147k/yr OnsiteFull Time
SciTec
SciTec: Provides advanced remote sensing and missile defense technology solutions.
6+ YOEBachelor's in a related field, CySa+ (or similar), 6+ years cybersecurity engineering, 2+ years CrowdStrike EDR/NG-SIEM experience, NIST 800-171/CMMC, vulnerability scanning, Linux/Windows/AD/IAM, scripting (Python, PowerShell, Bash), DoD clearance eligible.
CrowdStrike EDR, CrowdStrike NG-SIEM, SIEM, Tenable, NinjaOne, AWS, Azure, Python, PowerShell, Bash, NIST 800-171, CMMC, Active Directory, IAM, DevSecOps
1mo
Save
Mark Applied
Hide
Security Engineer
Fort Washington, Pennsylvania, United States
OnsiteFull Time
Toll Brothers
Toll BrothersNYSE: TOL: A leading builder of luxury residential homes.
1+ YOE1–3 years cybersecurity experience; understanding of networking, OS, identity management; familiarity with security monitoring, incident response, vulnerability management, and cloud/security tools.
IT service management, incident tracking platforms, next-generation firewall, SASE, Endpoint detection and response (EDR), XDR, cloud platforms, Identity and access management (IAM), SSO, MFA, Email security, phishing protection, Secure web gateway (SWG), DNS security, SIEM, UEBA, Attack surface management, Breach simulation tools, AI-assisted security technologies
3w
Save
Mark Applied
Hide
Intermediate Cyber Security Engineer
Cedar Rapids or Denver or Philadelphia
$70k-$84k/yr HybridFull Time
Transamerica
TransamericaNYSE: AEG: Provides insurance, retirement solutions, and investment products to customers.
1+ YOE1+ years cyber security engineering experience; knowledge of application security, vulnerability management, SDLC, and security frameworks; bachelor’s in related field or equivalent; certifications desirable (OSCP,CISSP,CEH,Security+/CySA/CASP).
NIST CSF, SIEM, Rapid7, ServiceNow Vulnerability Response (VR), Synk, CrowdStrike, ServiceNow, JIRA
3d
Save
Mark Applied
Hide
Network Security Engineer
Southlake or Ashburn or Cary or Branchburg
$72k-$129k/yr HybridFull Time
Verizon
VerizonNYSE: VZ: Provides wireless, broadband, and telecommunications services to customers.
3+ YOEBachelor's degree or 3+ years relevant experience; SIEM, TCP/IP, router operations, network security architecture, incident response, vulnerability management, and security monitoring experience required.
Splunk, QRadar, Microsoft Sentinel, Elastic, TCP/IP, BGP, OSPF, IS-IS, NetFlow, IPFIX, NIST 800-61, MITRE ATT&CK, Elasticsearch, Unix, Linux, IPsec, TLS
3d
Save
Mark Applied
Hide
Network Security Engineer
Southlake or Ashburn or Cary or Branchburg
$72k-$129k/yr HybridFull Time
Verizon
VerizonNYSE: VZ: Global provider of wireless, internet, and communication services.
3+ YOEBachelor's degree or 3+ years relevant experience; network security, SIEM, TCP/IP, routing, incident response, security architecture, vulnerability management, and threat detection expertise required.
Splunk, QRadar, Microsoft Sentinel, Elastic, NetFlow, IPFIX, BGP, OSPF, IS-IS, DNS, NIST 800-61, MITRE ATT&CK, Elasticsearch, Unix, Linux, IPsec, TLS, syslog, ACLs, TCP/IP, SIEM, IAM, MFA, IDS
1mo
Save
Mark Applied
Hide
Cyber Engineer (Hybrid- Aberdeen, Maryland)
Wilmington or Middletown or Aberdeen Proving Ground
$100k-$150k/yr HybridFull Time
Fairwinds Technologies
Fairwinds Technologies: Designing and integrating communication systems for defense agencies
5+ YOEDesign and secure tactical and enterprise networks, implement cyber defenses, perform vulnerability assessments and incident response; active Secret clearance and 5+ years experience required.
Cradlepoint, Peplink, TAK/ATAK, SIEM, IDS/IPS, VPN, IPsec, DISA STIG, DoD RMF
3d
Save
Mark Applied
Hide
Cybersecurity Platform and Identity Security Engineer
Temple Terrace or Franklinville
$112k-$194k/yr RemoteFull Time
Verizon
VerizonNYSE: VZ: Provides wireless, fiber-optic internet, and telecommunications services globally.
4+ YOEBachelor's degree or 4+ years' experience, 4+ years of software engineering, .NET/C#, microservices, REST APIs, security vulnerabilities, authentication, authorization, and secure configuration experience.
.NET, C#, Micro.Framework, SharedServices, WebTools, NuGet, SCIM, Apigee, Key Vault, Managed Identity, JWT, Active Directory, LDAP, CyberArk, OWASP Top 10, OWASP API Security Top 10, TruffleHog, GitLeaks, SAST, Azure DevOps, GitLab, EF Core, GitHub Copilot, Claude Code, OAuth 2.0
1mo
Save
Mark Applied
Hide
Container Security Engineer
Malvern or Charlotte or Dallas or Fort Worth
HybridFull Time
Vanguard
Vanguard: Provides mutual funds, ETFs, and investment management services.
Hands-on experience securing containerized AWS environments (ECS/EKS) and serverless workloads; experience with Wiz, CI/CD, image/runtime security, vulnerability assessment and remediation; undergraduate degree or equivalent experience.
Wiz, AWS, ECS, EKS, Serverless, Azure AKS, GCP GKE, CI/CD, SAST, SCA, IAST, DAST, NIST, OWASP, MITRE, AI/ML
2mo
Save
Mark Applied
Hide
Cyber Computer Engineer
Philadelphia, Pennsylvania, United States
OnsiteFull Time
Scientific Research Corporation
Scientific Research Corporation: Provides advanced engineering and technology solutions to government agencies.
5+ YOERequires 5+ years of cybersecurity experience, active Secret clearance, DoD 8570 IAT II and IAM II certifications, networking expertise, and experience with RMF, Windows/Linux compliance, vulnerability tools, and NIST/DISA standards.
eMASS, Xacta, ACAS, Nessus, SCAP, STIG Viewer, Microsoft Windows, Red Hat Linux, Linux, NIST, DISA, Risk Management Framework (RMF), Authority To Operate (ATO), POA&Ms
1w
Save
Mark Applied
Hide
Lead Penetration Test Engineer
Princeton or Boston or Chicago or Dallas or Houston or Englewood or Raleigh or New York or Southfield or Washington or Toronto or Calgary
$135k-$200k/yr HybridFull Time
S&P Global
S&P GlobalNYSE: SPGI: Provides independent credit ratings, market benchmarks, and financial analytics.
8+ YOE8+ years in information security focused on penetration testing, vulnerability management and application/cloud security; offensive security certification required; strong scripting skills and ability to communicate findings.
Burp Suite, Nessus, Metasploit, Nmap, MITRE ATT&CK, Bash, Python, Go, PowerShell, JavaScript, DAST, SAST, SCA, AWS, Azure, GCP
1mo
Save
Mark Applied
Hide
Security and Compliance Engineer
Pipersville or Houston
$115k-$125k/yr HybridFull Time
Tyndale
Tyndale: Supplies managed flame-resistant apparel programs for industrial workforces.
5+ YOE5+ years in IT security operations or related roles; experience with vulnerability/patch management, IAM, security monitoring, SOC 2/PCI, secure SDLC, and cross-team collaboration.
Tenable, EDR, MDR, SIEM, CI/CD, ERP, WMS
2mo
Save
Mark Applied
Hide
Information Systems Security Engineer
Philadelphia, Pennsylvania, United States
OnsiteFull Time
Data Intelligence
Data Intelligence: Provides engineering and cybersecurity solutions for federal government clients.
7+ YOESeven+ years in information security with DoD RMF, system scanning, A&A support, and vulnerability management; active Secret clearance; onsite in Philadelphia; BS in CS/IT or related field; relevant certifications.
ACAS, eMASS
1w
Save
Mark Applied
Hide
Lead Penetration Test Engineer
Princeton or Calgary or Toronto or Englewood or Chicago or Raleigh or New York or Dallas or Houston
$135k-$200k/yr HybridFull Time
S&P Global
S&P GlobalNYSE: SPGI: Provides financial data, analytics, and credit ratings worldwide.
8+ YOE8+ years information security experience focused on penetration testing, application/cloud security, vulnerability management; offensive security certification required; scripting (Bash, Python, Go, PowerShell, JavaScript); experience with DAST/SAST/SCA and CI/CD integration; bachelor's degree or equivalent.
Burp Suite, Nessus, Metasploit, Nmap, OWASP Top 10, MITRE ATT&CK, DAST, SAST, SCA, Bash, Python, Go, PowerShell, JavaScript, AWS, Azure, GCP